Cookie Notice

Strictly necessary session cookie

The app uses one strictly necessary session cookie named rspca_staff. It supports secure staff sign-in and protects public and staff forms against forged submissions. The public forms start the session only when a secure submission token is needed.

The cookie contains a random session identifier rather than the form information itself. It is configured as HttpOnly, SameSite=Strict, and Secure on the live HTTPS website. It normally expires when the browser session ends.

Staff browser storage

The staff portal may use local browser storage to remember whether desktop enquiry alerts are enabled and the last enquiry already displayed. This information remains on that staff device and is not used to track public visitors.

No analytics or advertising cookies

This build contains no advertising, analytics, profiling or social-media tracking cookies. A consent banner is therefore not displayed. If analytics, embedded media or other non-essential technology is added later, the cookie assessment and consent mechanism must be reviewed before deployment.

Managing cookies

You can remove cookies through your browser settings. Blocking the strictly necessary cookie will prevent staff login and secure form submission from working.